Vulnerabilities > CVE-2020-8766 - Improper Check for Unusual or Exceptional Conditions vulnerability in Intel Software Guard Extensions Data Center Attestation Primitives

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

intel

CWE-754

NVD

Published: 2020-11-12

Updated: 2020-11-30

Summary

Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Software Guard Extensions Data Center Attestation Primitives - Intel Software Guard Extensions Data Center Attestation Primitives 1.0 Intel Software Guard Extensions Data Center Attestation Primitives 1.0.1 Intel Software Guard Extensions Data Center Attestation Primitives 1.1 Intel Software Guard Extensions Data Center Attestation Primitives 1.2 Intel Software Guard Extensions Data Center Attestation Primitives 1.3 Intel Software Guard Extensions Data Center Attestation Primitives 1.3.1 Intel Software Guard Extensions Data Center Attestation Primitives 1.4 Intel Software Guard Extensions Data Center Attestation Primitives 1.4.1 Intel Software Guard Extensions Data Center Attestation Primitives 1.5	10

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00398